Data Protection


Shetland UHI is committed to ensuring that the processing of personal data is only undertaken in the legitimate operation of our business.

We collect and use information or personal data about staff, students and other individuals that we have contact with and aim to follow the eight principles outlined within the UK General Data Protection Regulation (UK GDPR). We will not sell your data to any 3rd party for marketing purposes.

Principles of the UK GDPR

Personal information must:

  • be fairly and lawfully processed
  • be processed for limited purposes
  • be adequate, relevant and not excessive
  • be accurate and up to date
  • not be kept for longer than is necessary
  • be processed in line with the date subjects’ rights
  • be secure
  • not be transferred to other countries without adequate protection

Shetland UHI is registered with the Information Commissioner's Office and a copy of our registration can be viewed at

Individuals have a right under the Act to make a request in writing for a copy of the information that an organisation holds about them on computer or in some manual filing systems.  This is called a 'subject access request'.

If you wish to make a subject access request you must apply in writing/email to:

Data Protection Officer

You can find out more here. 

For candidates of the Scottish Qualifications Authority (SQA) please see information on how SQA may use your data here.